Behavioral task
behavioral1
Sample
4a23e86734d51927d50cf5eac7a03b875be7c26421b2955ed1f10e8e36c4239e.exe
Resource
win7-20240221-en
General
-
Target
4a23e86734d51927d50cf5eac7a03b875be7c26421b2955ed1f10e8e36c4239e
-
Size
1.6MB
-
MD5
0cc229e133005ff7e0fe6c2462e2ad33
-
SHA1
f85977f84c6c59734ba08e685d5ce86267069cb1
-
SHA256
4a23e86734d51927d50cf5eac7a03b875be7c26421b2955ed1f10e8e36c4239e
-
SHA512
c5efa5162807ff8cafd239a16cfe225d7c639fa7446f6fcad0fea5ed814fb9134dc5aa309f99220a9d2571935ae5f5b12c3833d04efe78420793e360dbb41909
-
SSDEEP
49152:UrmaSqC/+VqteFYG7/t8ByVdDsMfeLfww0:UrmaeA6Ut3Vdgxrwp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a23e86734d51927d50cf5eac7a03b875be7c26421b2955ed1f10e8e36c4239e
Files
-
4a23e86734d51927d50cf5eac7a03b875be7c26421b2955ed1f10e8e36c4239e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE